Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/_R1ic-DH_Tmn-xxcQbIdior47zU.roa
File: _R1ic-DH_Tmn-xxcQbIdior47zU.roa (raw, json)
Hash identifier: kUEeB8xHT0SYnp6MNhZ5LuwGr1CDOF9gT/aGxxtLXoo=
Subject key identifier: FD:1D:62:73:E0:C7:FD:39:A7:FB:1C:5C:41:B2:1D:8A:8A:F8:EF:35
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018AD59A81F4F58327A2F9C029375F6C77ED
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/_R1ic-DH_Tmn-xxcQbIdior47zU.roa
Signing time: Wed 27 Sep 2023 07:46:27 +0000
ROA not before: Wed 27 Sep 2023 07:46:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.182.170.0/24 maxlen: 24
194.15.153.0/24 maxlen: 24
194.15.154.0/24 maxlen: 24
194.15.155.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:9a:81:f4:f5:83:27:a2:f9:c0:29:37:5f:6c:77:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Sep 27 07:46:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd1d6273e0c7fd39a7fb1c5c41b21d8a8af8ef35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:3f:18:7e:03:6c:c9:69:af:e3:fa:3f:a7:
65:e3:f2:f1:e7:8f:21:fe:76:3c:84:f3:63:40:f2:
74:3a:ec:da:3c:1f:2a:c2:3c:2e:4c:56:cc:c6:8b:
ca:d0:c6:1c:69:99:09:db:77:43:bd:7a:bf:76:4e:
7c:d5:39:8b:a7:18:cb:7c:9b:8f:94:ae:b8:12:34:
9e:20:d6:0e:78:1f:c5:37:a9:9b:9f:e2:a2:a2:3e:
6d:2d:ee:59:bb:54:99:c7:a8:95:e2:95:61:8a:23:
0d:57:b9:cf:e4:42:91:6e:20:bb:73:c0:5a:81:8b:
da:8b:36:1f:93:68:1e:a3:6e:6c:6d:94:b2:44:dc:
0a:a5:19:a0:24:de:bd:c1:2c:bd:41:22:65:88:81:
99:51:55:35:45:bd:1d:e7:de:c1:22:9d:b3:0b:7c:
cd:97:13:26:a9:e6:89:24:9a:c7:60:c2:67:45:18:
62:f8:ea:83:e4:2c:62:fb:f8:9a:be:08:8f:53:bf:
54:02:96:5c:5a:98:6f:6e:71:52:ae:06:f4:06:10:
95:b3:b1:ad:f0:36:ad:30:fe:58:c6:da:29:36:88:
4e:7f:a4:44:36:11:77:02:53:82:55:62:05:ee:d6:
3d:c4:b5:71:7d:72:0b:9e:3e:82:fd:df:10:f8:2e:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1D:62:73:E0:C7:FD:39:A7:FB:1C:5C:41:B2:1D:8A:8A:F8:EF:35
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/_R1ic-DH_Tmn-xxcQbIdior47zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.170.0/24
194.15.153.0-194.15.155.255
Signature Algorithm: sha256WithRSAEncryption
10:bc:c8:6e:78:19:67:8e:a5:f3:15:2e:82:63:6f:1b:7d:15:
75:e7:5b:80:75:35:94:08:39:91:34:84:29:ca:cf:ff:8f:df:
a0:5a:de:aa:72:06:01:b5:b1:ff:2c:13:fb:ea:65:03:b7:86:
6a:7b:71:e0:df:ee:97:f9:93:ef:08:36:ce:10:a5:0e:49:26:
b2:c1:02:ac:fd:18:78:cb:8c:57:db:7d:04:cd:22:79:7a:be:
49:7c:1e:9f:f9:ea:65:76:c3:6e:1c:cb:7a:30:dc:eb:3f:58:
eb:51:94:dc:fd:26:6a:d8:4a:f6:f7:3e:f7:ac:59:aa:37:f1:
cc:e3:d7:c9:5f:07:2a:68:21:20:a9:0f:81:3c:c7:65:bb:01:
87:ee:be:81:ef:82:e0:02:97:b4:d2:6e:08:2c:e3:28:90:5c:
90:94:7a:f2:0c:8b:13:3f:e0:f1:8e:9a:c8:1b:ba:99:11:91:
0e:23:23:72:db:c8:f0:c5:eb:7a:0f:97:39:05:6b:08:cc:29:
62:01:b5:ae:3f:9c:56:5e:1a:22:99:9e:17:80:61:82:b2:ee:
09:64:bb:e3:b6:6e:79:68:32:3c:4b:70:ee:1e:aa:01:65:82:
05:0b:96:f8:01:75:dc:52:84:cc:bd:84:e3:67:d0:c6:5d:9b:
4f:4b:d4:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:04 2024 by rpki-client on console-fra.rpki-client.org